Digital Forensics Training

BlackBag Essential Forensic Techniques I (EFT I)

This five-day course offers the Mac alternative for digital investigators who are already familiar with forensic investigation based on the Windows platform. The focus is on both analysis and reporting features. Using diverse scenarios and instruction from the teachers, the trainee gains insight into the use of a Mac by the suspect and where the files are stored.

For whom is this training intended?
This training is intended for digital investigators who already have experience with digital investigation in general and want to expand their knowledge with investigation devices based on Macintosh. This is the basic course for all other BlackBag Macintosh forensic training.

What will you learn during the training?
At the end of this training, the participants are able to distinguish between the different Macintosh devices and to properly investigate with knowledge of the Macintosh EFI. Additionally, the trainees are able to carry out a new installation of the Mac OS X, set up a forensic computer and carry out a complete investigation based on the Mac platform. The participant will also have gained sufficient knowledge to document relevant findings in a report.